Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/CE559B0EDE6711EF92801954C4F9AE02.roa
File: CE559B0EDE6711EF92801954C4F9AE02.roa (raw, json)
Hash identifier: YpR5PhMbO5nDKwm5xXkgtlg2UI/m34uM8lb4Slbobm8=
Subject key identifier: 06:FC:92:B0:B7:A1:25:8F:55:08:E6:98:66:A0:62:75:00:CA:B2:C1
Certificate issuer: /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Certificate serial: 02
Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/CE559B0EDE6711EF92801954C4F9AE02.roa
Signing time: Wed 29 Jan 2025 17:38:10 +0000
ROA not before: Wed 29 Jan 2025 17:38:10 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 141383
IP address blocks: 163.61.8.0/23 maxlen: 24
2001:df4:ffc0::/48 maxlen: 52
Validation: Failed, certificate revoked on Mon 10 Mar 2025 07:35:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DE3D
Validity
Not Before: Jan 29 17:38:10 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=679a6781-b397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d3:57:0b:17:b1:d8:a1:94:7c:7b:e4:c3:af:
02:02:f5:2e:8b:5e:56:8c:d8:87:95:98:4c:40:e2:
13:99:82:e8:3b:68:27:8d:ad:32:99:78:ad:c5:de:
a5:8f:b7:a5:a7:2c:ff:33:11:92:89:53:9b:e0:f1:
f8:8a:72:6b:f5:33:0c:2c:f6:1e:7c:c0:06:96:55:
9f:07:eb:12:c9:0a:19:86:99:1c:ce:0f:b5:5f:a7:
0a:b4:4b:79:6c:5a:64:e2:aa:78:59:4a:af:96:34:
e8:9c:04:fa:3d:34:b8:b7:36:9a:1e:ca:df:18:7f:
22:7d:e6:c4:2e:5d:72:ed:a7:9d:72:10:0d:6c:95:
5a:52:3e:31:00:57:a1:6b:44:6d:60:f4:97:25:15:
c6:6c:b7:71:3b:3e:86:8b:db:a9:66:9e:b7:2c:20:
68:39:2f:40:e9:a8:3d:7f:a8:9f:a0:db:14:c8:f3:
17:31:43:c4:b1:13:71:82:b3:5d:8f:05:87:bf:c9:
cb:72:e0:7d:d3:06:6e:f9:8d:09:2e:dd:8a:22:28:
95:ed:3f:71:f1:4a:53:a7:38:4a:e1:49:ef:c7:42:
97:ec:89:12:ee:96:cc:ec:e0:89:d0:36:eb:66:d8:
f7:f2:f0:c8:77:49:34:72:3f:b4:55:e7:38:5b:30:
50:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FC:92:B0:B7:A1:25:8F:55:08:E6:98:66:A0:62:75:00:CA:B2:C1
X509v3 Authority Key Identifier:
keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/CE559B0EDE6711EF92801954C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.8.0/23
IPv6:
2001:df4:ffc0::/48
Signature Algorithm: sha256WithRSAEncryption
71:46:b4:3e:87:6a:15:ee:15:7c:84:a5:7a:6f:7f:46:a2:0f:
0b:e8:20:04:57:d4:b2:78:10:7e:4a:08:19:ae:25:7f:8b:43:
de:c5:3b:79:11:4f:45:90:b5:72:ec:66:94:7f:79:17:57:c2:
ed:3b:65:29:b5:89:13:7a:1d:09:b5:0c:62:f9:48:9d:0f:c9:
b2:d4:4f:cb:59:3b:f8:26:7d:74:7b:36:83:19:34:6d:6c:f7:
09:07:1c:18:e5:45:a2:9d:28:91:1c:3c:0d:ab:0c:d8:26:79:
34:bc:fb:ad:38:3c:9d:e7:a4:0e:d3:db:2e:69:bd:28:41:5a:
90:09:41:c8:69:4f:cc:8e:4d:1d:eb:fb:30:f4:2f:4c:2c:8d:
95:03:00:8c:6f:4a:1d:e6:d6:c6:ff:e5:1b:7a:c9:ff:9b:ae:
41:ae:01:df:f7:63:28:f9:9f:2a:64:5d:e6:5f:de:4c:a5:59:
9e:75:6b:9f:98:91:21:09:1f:11:72:9c:ce:b6:d3:0a:3a:60:
57:1d:6b:4d:ca:28:cc:61:a6:c5:2b:98:a9:a8:85:ec:76:4e:
aa:23:c6:63:66:3f:68:a1:18:a1:50:0f:85:d4:70:cf:09:75:
a3:82:6d:1d:6a:e4:ca:27:b6:cf:36:f5:57:7e:9b:f2:5f:11:
b1:88:67:b4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
REUzRDExMC8GA1UEBRMoNjkxODFDRjQ1MUY4QjNGRUM2NEZDODI5OEI1MjJENDg4
Q0E1QzlFNjAeFw0yNTAxMjkxNzM4MTBaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3OWE2NzgxLWIzOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDR01cLF7HYoZR8e+TDrwIC9S6LXlaM2IeVmExA4hOZgug7aCeNrTKZeK3F3qWP
t6WnLP8zEZKJU5vg8fiKcmv1Mwws9h58wAaWVZ8H6xLJChmGmRzOD7Vfpwq0S3ls
WmTiqnhZSq+WNOicBPo9NLi3Npoeyt8YfyJ95sQuXXLtp51yEA1slVpSPjEAV6Fr
RG1g9JclFcZst3E7PoaL26lmnrcsIGg5L0DpqD1/qJ+g2xTI8xcxQ8SxE3GCs12P
BYe/ycty4H3TBm75jQku3YoiKJXtP3HxSlOnOErhSe/HQpfsiRLulszs4InQNutm
2Pfy8Mh3STRyP7RV5zhbMFDrAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUBvySsLeh
JY9VCOaYZqBidQDKssEwHwYDVR0jBBgwFoAUaRgc9FH4s/7GT8gpi1ItSIylyeYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERTNEL0ZEMUU0NTUwREU2
NTExRUY4MjQzRUUzMEM0RjlBRTAyL2FSZ2M5Rkg0c183R1Q4Z3BpMUl0U0l5bHll
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYVJnYzlGSDRzXzdHVDhncGkxSXRTSXlseWVZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
REUzRC9GRDFFNDU1MERFNjUxMUVGODI0M0VFMzBDNEY5QUUwMi9DRTU1OUIwRURF
NjcxMUVGOTI4MDE5NTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAaM9CDAPBAIAAjAJAwcAIAEN9P/AMA0GCSqGSIb3DQEBCwUA
A4IBAQBxRrQ+h2oV7hV8hKV6b39Gog8L6CAEV9SyeBB+SggZriV/i0PexTt5EU9F
kLVy7GaUf3kXV8LtO2UptYkTeh0JtQxi+UidD8my1E/LWTv4Jn10ezaDGTRtbPcJ
BxwY5UWinSiRHDwNqwzYJnk0vPutODyd56QO09suab0oQVqQCUHIaU/Mjk0d6/sw
9C9MLI2VAwCMb0od5tbG/+Ubesn/m65BrgHf92Mo+Z8qZF3mX95MpVmedWufmJEh
CR8RcpzOttMKOmBXHWtNyijMYabFK5ipqIXsdk6qI8ZjZj9ooRihUA+F1HDPCXWj
gm0dauTKJ7bPNvVXfpvyXxGxiGe0
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:10:19 2025 by rpki-client